CVE-2024-49962 ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple ACPI Vulnerabilities Disclosed Affecting System Stability Three vulnerabilities related to ACPI have been disclosed, affecting system stability and functionality. CVE-2024-46822 addresses a missing CPU entry in the get_cpu_for_acpi_id() function, while CVE-2024-49860 and CVE-2024-49962 focus on return type validation and null return checks in ACPI methods. These vulnerabilities could potentially lead to system malfunctions or crashes. 4 sources 41